mirror of
https://github.com/discourse/discourse.git
synced 2025-06-04 20:04:42 +08:00
SECURITY: Limit height of pre/svg elements
Ensures posts cannot have SVG or PRE elements that are too tall.
This commit is contained in:

committed by
Krzysztof Kotlarek

parent
d78357917c
commit
6183d9633d
@ -208,6 +208,10 @@
|
||||
height: var(--calculated-height);
|
||||
}
|
||||
}
|
||||
|
||||
svg {
|
||||
max-height: 2000px;
|
||||
}
|
||||
}
|
||||
|
||||
// add staff color
|
||||
@ -1008,6 +1012,7 @@ aside.quote {
|
||||
}
|
||||
|
||||
pre {
|
||||
max-height: 2000px;
|
||||
code {
|
||||
word-wrap: normal;
|
||||
display: block;
|
||||
|
Reference in New Issue
Block a user